Biometric verification shared between a processor and a secure element

Abstract

The processor and the secure element are for example embedded on the same physical medium.

1 . An enrollment method of an individual for processing biometric data of the individual by a processor and by a secure element, comprising the following steps implemented by the processor from a reference biometric data (w) acquired on the individual:
 obtaining ( 200 ) a logical object calculated from the reference biometric data (w) and from a key (PIN), said object making it possible to subsequently reconstruct said key (PIN) from an acquired biometric data (w′) if a distance between the reference biometric data (w) and the acquired biometric data (w′) is less than a threshold, said logical object being referred to as helper data (H 1 ),   transmitting ( 300 ) the key (PIN) to the secure element.   
     
     
         2 . The enrollment method according to  claim 1 , wherein the processor ( 10 ) and the secure element ( 11 ) are embedded on a single physical medium ( 2 ). 
     
     
         3 . The method according to  claim 1 , wherein the helper data (H 1 ) comprises a result from the exclusive OR operator applied to the reference biometric data (w) and to the key (PIN). 
     
     
         4 . The enrollment method according to  claim 1 , wherein the key (PIN) is independent from the reference biometric data (w). 
     
     
         5 . The enrollment method according to  claim 1 , wherein the processor is configured to perform a reconstruction function (Rec 1 ) taking as input the helper data (H 1 ) and an acquired biometric data (w′), wherein a reconstruction result provided as output by the reconstruction function (Rec 1 ) depends on the distance between the reference biometric data (w) and the acquired biometric data (w′). 
     
     
         6 . The enrollment method according to  claim 1 , wherein the helper data (H 1 ) is calculated from an error correcting code (C) associated with a plurality of error correcting code elements separated two by two by a predetermined gap. 
     
     
         7 . The enrollment method according to  claim 1 , wherein, during the transmission step ( 300 ), the key (PIN) is transmitted in encrypted form to the secure element. 
     
     
         8 . The enrollment method according to  claim 1 , wherein the reference biometric data (w) is erased from the memory of the processor at the end of the enrollment method. 
     
     
         9 . The enrollment method according to  claim 1  comprising an additional step of recording the key in a memory of the secure element, in encrypted form. 
     
     
         10 . The enrollment method according to  claim 1 , wherein the reference biometric data (w) is obtained from a biometry pattern, said biometry preferably being a fingerprint or an iris or a face or a voice. 
     
     
         11 . A biometric processing method of data from a candidate individual by a processor and by a secure element, the processing following an enrollment of at least one authorized individual according to an enrollment method according to  claim 1 , the processing method comprising the following steps implemented by the processor:
 receiving ( 1100 ) an acquired biometric data (w′);   obtaining ( 1200 ) a reconstruction result from the acquired biometric data (w′) and from a helper data (H 1 ) obtained during the enrollment of the authorized individual;   transmitting ( 1300 ) the reconstruction result to the secure element.   
     
     
         12 . The biometric processing method according to  claim 11 , wherein the biometric processing comprises an authentication or an identification of the candidate individual, comprising a step implemented by the secure element of binary comparison ( 1400 ) between, on the one hand, the reconstruction result and, on the other hand, a key (PIN) transmitted to the secure element during enrollment. 
     
     
         13 . The biometric processing method according to  claim 12 , wherein the binary comparison step ( 1400 ) is implemented with respect to a plurality of keys (PIN) each associated with an authorized individual. 
     
     
         14 . A processor ( 10 ) for use in processing biometric data from an individual, comprising computer code instructions for making it possible to obtain a reconstruction result from an acquired biometric data and from the helper data, the processor being configured to perform the enrollment method and to perform a biometric processing method according to  claim 11 . 
     
     
         15 . An assembly for processing biometric data from an individual comprising a processor ( 10 ) according to  claim 14  and further comprising a secure element ( 11 ), the processor comprising an interface ( 14 ) for communication with the secure element.